Dashboard

In KUMA, you can configure the Dashboard to display the most recent information (or analytics) about KUMA processes. Analytics are generated using widgets, which are specialized tools that can display specific types of information. If a widget displays data on events, alerts, incidents, or active lists, you can click its header to open the corresponding section of the KUMA web interface with an active filter and/or search query that is used to display data from the widget.

The collections of widgets are called layouts. Administrators and analysts can create, edit, and delete layouts. You can also assign any layout as the default layout so that it is displayed when you open the Dashboard section.

The information in the Dashboard section is updated regularly as per layout configuration, but you can force an update by clicking the button at the top of the window. The time of last update is displayed near the window title.

The data displayed on the dashboard depends on the tenants that you can access.

For convenient presentation of analytical data, you can enable TV mode. This lets you hide the left pane containing sections of the KUMA interface and switch to full-screen mode in Full HD resolution. In TV mode, you can also configure a slide show display for the selected layouts.

Creating a dashboard layout

To create a layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and select Create layout.

   The New layout window opens.

3. In the Tenants drop-down list, select the tenants that will own the layout being created.
4. In the Time period drop-down list, select the time period from which you require analytics:
   • 1 hour
   • 1 day (this value is selected by default)
   • 7 days
   • 30 days
   • In period—receive analytics for the custom time period. The time period is set using the calendar that is displayed when this option is selected.

     The upper boundary of the period is not included in the time slice defined by it. In other words, to receive analytics for a 24-hour period, you should configure the period as Day 1, 00:00:00 – Day 2, 00:00:00 instead of Day 1, 00:00:00 – Day 1, 23:59:59.

5. In the Refresh every drop-down list, select how often data should be updated in layout widgets:
   • 1 minute
   • 5 minutes
   • 15 minutes
   • 1 hour (this value is selected by default)
   • 24 hours
6. In the Add widget drop-down list, select the required widget and configure its settings.

   You can add multiple widgets to the layout.

   You can also drag widgets around the window and resize them using the button that appears when you hover the mouse over a widget.

   You can edit or delete widgets added to the layout by clicking the icon and selecting Edit to change their configuration or Delete to delete them from the layout.

   • Adding widgets

     To add widget:

     1. Click the Add widget drop-down list and select required widget.

        The window with widget parameters opens. You can see how the widget will look like by clicking the Preview button.

     2. Configure widget parameters and click the Add button.
   • Editing widget

     To edit widget:

     1. Hover the mouse over the required widget and clicking the icon that appears.
     2. In the drop-down list select Edit.

        The window with widget parameters opens. You can see how the widget will look like by clicking the Preview button.

     3. Update widget parameters and click the Save button.
7. In the Layout name field, enter a unique name for this layout. Must contain from 1 to 128 Unicode characters.
8. Click Save.

The new layout is created and is displayed in the Dashboard section of the KUMA web interface.

Selecting a dashboard layout

To select layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and select the required layout.

The selected layout is displayed in the Dashboard section of the KUMA web interface.

Selecting a dashboard layout as the default

To set a dashboard layout as the default:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon.

The selected layout is become default layout.

Editing a dashboard layout

To edit layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon.
4. The Customizing layout window opens.
5. Make the necessary changes. The settings that are available for editing are the same as the settings available when creating a layout.
6. Click Save.

The layout is updated and is displayed in the Dashboard section of the KUMA web interface.

If the layout was deleted or assigned to a different tenant while you were making changes to it, an error will be displayed when you click Save. In this case, the layout will not be saved. Reload the page in your web browser to view the list of available layouts in the drop-down list in the upper-right corner.

Deleting a dashboard layout

To delete layout:

1. Open the KUMA web interface and select the Dashboard section.
2. Open the drop-down list in the top right corner of the Dashboard window and hover mouse over the required layout.
3. Click the icon and confirm this action.

The layout is deleted.

Preconfigured widgets

KUMA comes with a set of preconfigured layouts with widgets:

• Alerts Overview layout (Alert overview):
  • Active Alerts
  • Unassigned Alerts
  • Latest Alerts
  • Alerts distribution
  • Alerts by Priority
  • Alerts by Assignee
  • Alerts by Status
  • Affected users in alerts
  • Affected Assets
  • Affected Assets Categories
  • Top event source by alerts number
  • Alerts count by rule
• Incidents Overview layout (Incidents overview):
  • Active incidents
  • Unassigned Incidents
  • Latest Incidents
  • Incidents distribution
  • Incidents by Priority
  • Incidents by assignee
  • Incidents by Status
  • Affected Assets in Incidents
  • Affected Users in Incidents
  • Affected Assets Categories in Incidents
  • Incidents by Tenant
• Network Overview layout (Network activity overview):
  • Netflow top internal IPs
  • Netflow top external IPs
  • Netflow top hosts for remote control — requests to ports 3389, 22, 135 are monitored.
  • Netflow total bytes by internal ports
  • Top Log Sources by Events count

Enabling and disabling TV mode

It is recommended to create a separate user with the minimum required set of right to display analytics in TV mode.

To enable TV mode:

1. Open the KUMA web interface and select the Dashboard section.
2. Click the button in the upper-right corner.

   The Settings window opens.

3. Move the TV mode toggle switch to the Enabled position.
4. If you want to configure the slideshow display of widgets, do the following:
   1. Move the Slideshow toggle switch to the Enabled position.
   2. In the Timeout field, indicate how many seconds to wait before switching widgets. If the value 00:00 is selected, widgets will not switch.
   3. In the Queue drop-down list, select the widgets to view.
   4. If necessary, change the order in which the widgets are displayed by using the button to drag and drop them in the necessary order.
5. Click the Save button.

TV mode will be enabled. To return to working with the KUMA web interface, disable TV mode.

To disable TV mode:

1. Open the KUMA web interface and select the Dashboard section.
2. Click the button in the upper-right corner.

   The Settings window opens.

3. Move the TV mode toggle switch to the Disabled position.
4. Click the Save button.

TV mode will be disabled. The left part of the screen shows a pane containing sections of the KUMA web interface.